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DETAILED ACTION 

This office action is in response to application filed August 1, 2006. Claims 1-16 are 
pending. 

Claim Rejections - 35 USC §102 

The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 

Claims 1-16 are rejected under 35 U.S.C. 102(e) as being anticipated by Murakami et al. 
(U.S. Patent No.: 6,996,724) 

1. Regarding Claim 1, Murakami teach and describe a secret information management 
system for managing a secret information of a user, comprising: a data division unit configured 
to divide the secret information into a plurality of divided data by using a secret sharing scheme, 
such that the secret information can be recovered from a prescribed number of the divided data; a 
divided data storing unit configured to store a part of the plurality of divided data into a terminal 
of the user as user's divided data, and a rest of the plurality of divided data into one or more of 
deposit servers; a data re-division unit configured to generate a plurality of re-divided data 
different from the plurality of divided data obtained by the data division unit, from a combination 
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of the prescribed number of the divided data among the divided data stored in the deposit servers 
by using the secret sharing scheme; and a re-divided data storing unit configured to store a part 
of the plurality of re-divided data into the terminal as newly generated user's divided data and a 
rest of the plurality of re-divided data into the deposit servers as newly generated divided data 
(Fig.2-4, and col.6 line 26 tocol.8 line 60). 

2. Regarding Claim 15, Murakami teach and describe a secret information management 
method for managing a secret information of a user, comprising the steps of: dividing the secret 
information into a plurality of divided data by using a secret sharing scheme, such that the secret 
information can be recovered from a prescribed number of the divided data; storing a part of the 
plurality of divided data into a terminal of the user as user's divided data, and a rest of the 
plurality of divided data into one or more of deposit servers; generating a plurality of re-divided 
data different from the plurality of divided data obtained by the dividing step, from a 
combination of the prescribed number of the divided data among the divided data stored in the 
deposit servers by using the secret sharing scheme; and storing a part of the plurality of re- 
divided data into the terminal as newly generated user's divided data and a rest of the plurality of 
re-divided data into the deposit servers as newly generated divided data (Fig.2-4, and col.6 line 
26 tocol.8 line 60). 

3. Regarding Claim 16, Murakami teach and describe a. computer program product for 
causing a computer to function as a secret information management system for managing a secret 
information of a user, the computer program product comprising: a first computer program code 
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for causing the computer to divide the secret information into a plurality of divided data by using 
a secret sharing scheme, such that the secret information can be recovered from a prescribed 
number of the divided data; a second computer program code for causing the computer to store a 
part of the plurality of divided data into a terminal of the user as user's divided data, and a rest of 
the plurality of divided data into one or more of deposit servers; a third computer program code 
for causing the computer to generate a plurality of re-divided data different from the plurality of 
divided data obtained by the first computer program code, from a combination of the prescribed 
number of the divided data among the divided data stored in the deposit servers by using the 
secret sharing scheme; and a fourth computer program code for causing the computer to store a 
part of the plurality of re-divided data into the terminal as newly generated user's divided data 
and a rest of the plurality of re-divided data into the deposit servers as newly generated divided 
data (Fig.2-4, and col.6 line 26 tocol.8 line 60). 

4. Claims 1-14 are rejected applied as above rejecting Claim 1. Furthermore, Murakami 
teach and describe a method 

As per Claim 2, further comprising: a data recovery unit configured to acquire the user's 
divided data, and recover the secret information from a combination of the prescribed number of 
the divided data among the user's divided data and the divided data stored in the deposit servers 
by using the secret sharing scheme, at a time of utilizing the secret information (Fig.2-4, and 
col.6 line 26 tocol.8 line 60) 
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As per Claim 3, further comprising: a utilization log memory unit configured to store a 
fact that the secret information is utilized as a utilization log information, at a time of utilizing 
the secret information (Fig.2-4, and col. 6 line 26 tocol.8 line 60). 

As per Claim 4, further comprising: a divided data transmission unit configured to 
transmit a combination of as many of the divided data stored in the deposit servers as the 
prescribed number minus a number of the divided data maintained by the user, to the terminal, at 
a time of recovering the secret information (Fig.2-4, and col. 6 line 26 tocol.8 line 60). 

As per Claim 5, further comprising: a transmission unit configured to transmit the part of 
the divided data to be stored into the terminal, to the terminal through a communication network 
(Fig.2-4, and col.6 line 26 to col.8 line 60). 

As per Claim 6, further comprising: a reception unit configured to receive the secret 
information from the terminal through a communication network (Fig.2-4, and col.6 line 26 to 
col.8 line 60). 

As per Claim 7, the data division unit and the data re-division unit use the secret sharing 
scheme which is a data division method for dividing the secret information into the divided data 
in a desired number of division according to a desired processing unit bit length, in which the 
divided data in the desired number of division are generated by generating a plurality of original 
partial data by partitioning the secret information in units of the processing unit bit length, 
generating a plurality of random number partial data of the processing unit bit length from a 
random number in a length shorter than or equal to a bit length of the secret information, in 
correspondence to respective ones of the plurality of original partial data, and generating each 
divided partial data in the processing unit bit length that constitutes each divided data by 
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calculating exclusive OR of the original partial data and the random number partial data, and the 
re-divided data in the desired number of division are generated by generating a plurality of new 
random number partial data of the processing unit bit length from a newly generated random 
number, and generating the re-divided partial data in the processing unit bit length by calculating 
exclusive OR of the divided partial data and the new random number partial data(Fig.2-5, and 
col.6 line 26 to col.8 line 60,and co.l 1 line 6 to line 47). 

As per Claim 8, wherein the data re-division unit generates the re-divided data by 
calculating exclusive OR of the divided partial data that constitute each divided data contained in 
a combination of the prescribed number of the divided data(Fig.2-4, and col.6 line 26 tocol.8 line 
60). 

As per Claim 9, wherein the data division unit and the data re-division unit use the secret 
sharing scheme which generates each re-divided partial data that constitutes each re-divided data 
by calculating exclusive OR of each divided partial data and the new random number partial data 
corresponding to the random number partial data used in generating each divided partial data 
(Fig.2-5, and col.6 line 26 tocol.8 line 60 and col.l 1 line 6 to line 47). 

As per Claim 10, wherein the data division unit and the data re-division unit use the 
secret sharing scheme in which old random number partial data are deleted from each re-divided 
partial data that constitutes each re-divided data by calculating exclusive OR of each re-divided 
partial data and the old random number partial data used in generating each divided partial data 
corresponding to each re-divided partial data (Fig.2-4, and col.6 line 26 to col.8 line 60). 

As per Claim 11, wherein the data division unit and the data re-division unit use the 
secret sharing scheme in which the desired number of division is n=3, the divided partial data 
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D(i,j) (i=l to 3, j=l to 2) that constitute each divided data are modified by interchanging 
D(l j+1) and D(2, j+1) (Fig.2-4, and col.6 line 26 to col.8 line 60). 

As per Claim 12, the data division unit and the data re-division unit use the secret sharing 
scheme in which the desired number of division is n.gtoreq.4, the divided partial data D(i,j) (i=l 
to n, j=l to n-1) that constitute each divided data are modified by setting a new value of D(l,j) to 
be exclusive OR of D(l,j) and D(n,j), and then rotating D(l,j), D(2,j), . . . D((n-l),j) (Fig.2-4, and 
col.6 line 26 tocol.8 line 60). 

As per Claim 13, the data division unit and the data re-division unit use the secret sharing 
scheme in which D(l,j), D(2,j), . . . D((n-1 ),j) are rotated for (i-1) times(Fig.2-4, and col.6 line 26 
to col.8 line 60). 

As per Claim 14, the data re-division unit generates the plurality of re-divided data from a 
combination of the prescribed number of the divided data among the divided data stored in the 
deposit servers and the user's divided data stored in the terminal, upon receiving the user's 
divided data from the terminal, and the re-divided data storing unit stores a part of the plurality 
of re-divided data into another terminal of another user as another user's divided data and a rest 
of the plurality of re-divided data into the deposit servers as new divided data, at a time of 
transferring an access right for the secret information from the user to the another user(Fig.2-5, 
and col.6 line 26 tocol.8 line 60 and col.l 1 line 6 to line 47). 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to SYED ZIA whose telephone number is (571)272-3798. The 
examiner can normally be reached on 9:00 to 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

sz 

February 26, 2009 
/Syed Zia/ 

Primary Examiner, Art Unit 2431 



